Chapter 40 — Thesis and presentation | Bachelor's Security architecture and engineering

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Chapter 40 — Thesis and presentation

Lesson map

Lesson 40 published. Map, example, EX118.

flowchart TD
  N0["Learning outcomes"]
  N1["40.1 Structuring the thesis"]
  N2["40.2 Two audiences"]
  N3["40.3 Next steps"]
  N4["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4
  N4 --> EX["Worked example"]
  EX --> Q["Exercise EX118"]

Logical drawing

flowchart LR
  N0["Learning outcomes"]
  N1["40.1 Structuring the thesis"]
  N2["40.2 Two audiences"]
  N3["40.3 Next steps"]
  N4["Synthesis"]
  N0 --> N1 --> N2 --> N3 --> N4 --> Q["EX118"]

[Learning outcomes]
    |
    v
[40.1 Structuring the thesis]
    |
    v
[40.2 Two audiences]
    |
    v
[40.3 Next steps]
    |
    v
[Synthesis]
    |
    v
[Worked example] --> [Exercise EX118]

Learning outcomes

You will (1) structure a bachelor's thesis in security architecture; (2) present findings to academic and practitioner audiences; (3) plan next steps in study or work.

40.1 Structuring the thesis

Lucas writes his thesis in the standard structure: introduction with the problem and questions, background on principles and standards, method, the Fernway architecture and capstone, results including verification and review, discussion of limits, and conclusion. He cites only sources he read, including Saltzer and Schroeder (1975), Shostack (2014), SP 800-207 and Anderson (2020). He keeps synthetic labels on every data set and case detail. The thesis runs to forty pages, with models and test records in appendices. Each chapter opens with a short summary, and a glossary explains terms such as trust boundary for non-specialist readers.

40.2 Two audiences

Lucas presents twice. To the examiners he explains methods, validity and how his work relates to published guidance. To Fernway's board he explains what changed, what it cost, what risks remain and what decisions they must make next. He uses the same evidence but different emphasis and language, as practised in chapter 32. The board asks about the identity provider risk, and the examiners ask about the quasi-experiment's validity. He answers both directly, admitting uncertainty where it exists. Each presentation lasts twenty minutes plus questions.

40.3 Next steps

Lucas reflects on his course. He has learned to model systems, assess risks, choose and verify controls, measure outcomes, review evidence and work across disciplines. Fernway offers him a junior security role, and Dr Bellini suggests a postgraduate certificate in security architecture later. He chooses the job, with plans to study part time. His final advice to future students is to treat every design as a hypothesis to test, and to write down what is not known as carefully as what is.

Worked example

Lucas structures a forty-page thesis, presents to examiners and the board with different emphasis and plans to join Fernway while studying part time.

Synthetic case. Thesis details and people are synthetic; cited works are real.

Errors and limits

Presentations simplify; written work holds the detail. Career plans change.

Exercises

EX118 — Thesis sources. What rule did Lucas follow for citations? Rubric: 3 = cite only sources he actually read;; 2 = read;; 1 = any;; 0 = none.
EX119 — Board questions. What did the board ask about? Rubric: 3 = the identity provider risk;; 2 = identity;; 1 = validity;; 0 = none.
EX120 — Final advice. What was Lucas's advice to future students? Rubric: 3 = treat every design as a hypothesis and record unknowns carefully;; 2 = hypothesis;; 1 = vague;; 0 = none.

Synthesis

A thesis and two tailored presentations complete the course, turning project work into shared knowledge and next steps.

Continue studying — chapter 40 of 40

← Chapter 39 (draft) · Course chapter index · Worked results ↓ · Next course via chapter index →